ATAboy

If you don't want to build your own, the hardware can be purchased here: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy is designed for retro computing enthusiasts, data recovery experts, and archivists. Read and write the oldest of IDE hard drives, without th...

KittyStager

KittyStager KittyStager is a stage 0 C2 comprising an API, client, and malware. The API is responsible for delivering basic tasks and shellcode to be injected into memory by the malware. The client also connects to the API and allows for interaction with the malware by creating tasks. The goal of...

Exploit for CVE-2026-98260

CVE-2026-98260 — Android arm64 POSIX Timer UAF for Redmi K80 P...

spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

CVE-2023-4863-

CVE-2023-4863 Triggering the famous libweb 0day vuln with libfuzzer...

drupalhunter

drupalhunter CVE-2018-7600 0-Day Exploit cyber-warrior.org...

pfsense-wizard-uid0

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-wizard-uid0 pfsense-wizard-uid0 Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org wizard.php?xml=setupwizard.xml step 7 getUserEntryByUID0 plus localusersetpassword...

0

The open-source AI security harness Investigate vulnerabilities, review findings, and work on fixes in your browser. Use your own model provider. Connect coding agents through CLI or MCP. Get started · Demo · Docs · Research · Releases · 0cloud Backed by Y Combinator · The Swiss Applied AI &...

CVE-2023-4863

CVE-2023-4863/CVE-2023-41064 A POC for CVE-2023-4863. NOT an exploit Shout to @benhawkes who discovered the right set of codelengths to trigger this vulnerability! Please consult Ben's blog post for more information! https://blog.isosceles.com/the-webp-0day/...

Chaos-Rootkit

Chaos-Rootkit Chaos-Rootkit is an x64 Ring 0 rootkit i wrote to better understand kernel internals and rootkit techniques. Gui version Features Hide process: This feature allows you to hide processes from listing tools via DKOM. Elevate specific process privileges : This feature enables you to...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

ZDI-CAN-16857

Exploit for CVE-2023-32163 ZDI-CAN-16857 0-day Here you can read my report 📜 Here you can buy me a unicorn 🦄 Share the Knowledge!...

scan

Atomdrift Scan Atomdrift Scan is a modern ML-based malware scanner designed to detect 0-day attacks against the software supply-chain. It's designed to be deterministic, fast, and flexible, and embeddable in any workflow or security tool you have in mind, and can operate against files, archives,...

ksmbd-n-day

README This repo accompanies my research article Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days, in which I develop a POC for n-days from 2023: CVE-2023-52440 and CVE-2023-4130. I provide the kernel .config, a kernel run script, an image build script, and the POC. The...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - Critical NGINX RCE CVSS 9.2 Classification Category: 0-Day / Remote Code Execution CVE: CVE-2026-42945 CVSS: 9.2 Critical Date Discovered: May 12, 2026 Date Patched: May 2026 F5 quarterly security release Source: GitHub DepthFirstDisclosures/Nginx-Rift Vulnerability Details A...

Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-

This repository does not have a README...

mali-pagecache-root

TCL 50C721 rooting toolkit Full root exploit chain and post-root toolkit for tethered root, SELinux Permissive, ad blocking, debloat and automated backup on one TCL Android TV firmware. This is firmware-specific research and tooling, not a universal TCL root tool or a supported installer. Tested...

ZDI-CAN-16318

Exploits for CVE-2023-32162 ZDI-CAN-16318 0-day Here you can find my Local Privilege Escalation Vulnerability report. Here you can find my Arbitrary File Read Vulnerability report. Here you can find my Arbitrary File Read\Write Vulnerability report. Here you can buy me a unicorn 🦄 Share the...

CVE-2022-37706

CVE-2022-37706 Exploit for CVE-2022-37706, a 0-day in one of the main window managers of Linux - Enlightenment https://www.enlightenment.org/. All Credit to MaherAzzouzi https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit. This is a copy of the exploit for CTFs...

challenge_CVE-2020-13777

Chanllenge CVE-2020-13777 Try to prove if TLS 1.3 MITM is possible and decrypt 0-RTT early data in pcap here Server: 192.168.100.23:5556. See https://jovi0608.hatenablog.com/entry/2020/06/13/104905 and CVE-2020-13777 for details...